Privacy Policy (Datenschutzerklärung)
Last updated: 20 August 2026
This page explains what personal data we process when you use learn.yukaringermany.com, why we process it, and what rights you have under the EU General Data Protection Regulation (GDPR / DSGVO).
1. Controller
Yukari Takagi / Yukaringermany, Owner Yukari Takagi
c/o IP-Management #43185
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany
Email: yukaringermany@gmail.com
See also our Imprint (Impressum).
2. What we process, and why
- Account data (email address, name, profile picture, login events) — to create and secure your account and give you access to purchased courses. Legal basis: Art. 6(1)(b) GDPR (contract).
- Purchase data (courses bought, access periods, payment status — never your full card number, which goes directly to our payment provider) — to fulfil your purchase and meet statutory bookkeeping duties. Legal basis: Art. 6(1)(b) and (c) GDPR.
- Course progress data you enter (e.g. exam dates) — to provide course features you actively use. Legal basis: Art. 6(1)(b) GDPR.
- Technical log data (IP address, browser, timestamps) — processed by our hosting provider to deliver the site securely and defend against abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning service).
We do not use advertising trackers or sell personal data. We do not run analytics on this site at present.
3. Processors we use
We use the following service providers (processors under Art. 28 GDPR). With each of them we have a data processing agreement (DPA):
| Provider | Purpose | Data location / transfer basis |
|---|---|---|
| Clerk, Inc. (USA) | Authentication, user accounts | USA — EU Standard Contractual Clauses via Clerk's DPA |
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing | EU entity; possible transfers per Stripe's DPA/SCCs |
| Vercel Inc. (USA) | Website hosting, server logs | USA/EU edge — Standard Contractual Clauses via Vercel's DPA |
| Amazon Web Services EMEA SARL | Course media storage/delivery | EU (Frankfurt, eu-central-1); no personal data stored there |
4. Newsletter
If you subscribe to our newsletter, we process your email address to send you course news and learning tips. Legal basis: your consent, Art. 6(1)(a) GDPR, collected via double opt-in (you must confirm a link we email you; we record the confirmation time). Emails are sent via Amazon Web Services (SES, EU region Frankfurt), where the subscriber list is also stored. You can withdraw consent anytime via the unsubscribe link in every newsletter — your address is then deleted from the list.
5. Cookies
We only set cookies that are technically necessary to keep you signed in (session cookies from our authentication provider). These require no consent under § 25(2) TDDDG. We set no marketing or analytics cookies — which is why you see no cookie banner.
5. How long we keep data
Account data is kept while your account exists and deleted when you delete your account or ask us to. Payment records are retained for the statutory retention periods of German commercial and tax law (up to 10 years) by us and by Stripe.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- correction of inaccurate data (Art. 16)
- deletion ("right to be forgotten", Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- lodge a complaint with a supervisory authority (Art. 77) — e.g. the data protection authority of your German federal state
To exercise any of these rights, email yukaringermany@gmail.com. Account deletion removes your data from our authentication provider; payment records remain with Stripe for as long as tax law requires.
7. Changes
We will update this page when our processing changes and adjust the date at the top.